PRIVACY POLICY

Last updated: 30/06/2026

This Privacy Policy explains how Day of the Dead Journey collects, uses, stores, shares, and protects personal information when you use our website, digital products, email content, forms, maps, guides, recommendations, and related services.

Day of the Dead Journey is operated by Philip Broomhall, based in Victoria, Australia.

You can contact us at:

Day of the Dead Journey
Melbourne, Victoria, Australia
Email: dayofthedeadjourney@gmail.com
Website: dayofthedeadjourney.com

This Privacy Policy should be read together with our Terms of Use, which explain important rules and disclaimers about travel information, event changes, third-party providers, affiliate links, digital products, refunds, and user responsibility.

1. What this Privacy Policy covers

This Privacy Policy applies when you:

visit dayofthedeadjourney.com
join our email list
download a free guide or lead magnet
purchase a digital product or planning pack
contact us through a form or by email
submit feedback, corrections, photos, videos, quotes, reviews, or travel experiences
interact with our maps, guides, itineraries, planning content, or recommendations
click affiliate links or links to third-party providers
participate in interviews, research, surveys, or content collaborations with us

This Privacy Policy does not apply to third-party websites, booking platforms, payment processors, tour operators, accommodation providers, restaurants, map platforms, social media platforms, or other external services. Those providers have their own privacy policies.

2. Personal information we collect

We collect personal information in a few different ways, depending on how you interact with us.

Information you provide to us

You may provide personal information when you sign up, contact us, make a purchase, submit a form, or participate in research or content creation.

This may include:

name
email address
message content
enquiry details
travel dates or trip preferences, if you choose to provide them
accommodation, tour, budget, or itinerary preferences, if you choose to provide them
feedback, corrections, reviews, testimonials, questions, or travel experiences
photos, videos, audio, quotes, interview material, or other content you choose to send us
social media handle, website, business name, or professional role, if relevant to an interview, contribution, partnership, or credit
payment confirmation details, product purchased, order status, and access-delivery information

We do not intentionally collect sensitive personal information unless you choose to provide it. Sensitive information may include things such as health information, accessibility needs, dietary requirements, religious beliefs, racial or ethnic origin, or other special-category information.

Please do not send sensitive personal information unless it is genuinely necessary for your enquiry.

Purchase and digital product information

If you purchase a digital product, planning pack, map, guide, itinerary, or other paid resource, we may collect or receive information needed to process and deliver that purchase.

This may include:

your name and email address
product purchased
payment status
order date
access link or unique product URL
support messages about your purchase
records needed for accounting, tax, fraud prevention, customer support, and legal compliance

Payments may be processed by third-party payment providers such as Stripe. We do not store your full card details on our own systems.

Email marketing and update information

If you join our email list, download a free guide, request updates, or consent to receive marketing, we may collect:

email address
name, if provided
signup source
consent status
email preferences
email engagement information, such as opens, clicks, unsubscribes, and delivery status
event alert or guide-download preferences, if offered

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in our emails or contacting us.

We may still send non-marketing emails where necessary, such as purchase receipts, product access emails, service updates, support replies, or important legal notices.

Automatically collected information

When you visit our website, some information may be collected automatically through cookies, analytics tools, server logs, embedded content, or similar technologies.

This may include:

IP address
approximate location derived from IP address
device type
browser type
operating system
pages viewed
links clicked
referring website
time spent on pages
interactions with forms, buttons, maps, or embedded content
general usage and performance data
analytics identifiers

This helps us understand how people use the site, improve content, fix errors, measure performance, and understand which pages are useful.

Cookies and similar technologies

We may use cookies, pixels, tags, scripts, local storage, or similar technologies for:

essential website functionality
security and fraud prevention
remembering preferences
analytics and site improvement
email signup and form functionality
affiliate tracking
embedded maps, videos, social content, or third-party tools
marketing or advertising, if added in future

Some cookies are set by us. Others may be set by third-party services, such as website hosting, analytics providers, embedded map providers, affiliate networks, email platforms, or social media platforms.

You can usually control or block cookies through your browser settings. If we use non-essential analytics, advertising, or affiliate cookies that require consent in your location, we will provide an appropriate cookie notice or consent tool.

Information from third parties

We may receive limited information from third-party services that help us operate the website and business.

This may include:

payment confirmation from Stripe or another payment provider
email signup and engagement information from MailerLite or another email platform
analytics information from Google Analytics or similar tools
affiliate tracking or referral information from affiliate platforms
booking or referral status from tour, accommodation, or travel partners, where applicable
public information from social media if you interact with us there
information from contributors, interviewees, photographers, videographers, or partners where they choose to provide it

We do not buy personal information lists.

3. How we use personal information

We use personal information to operate, improve, deliver, and protect Day of the Dead Journey.

We may use your information to:

provide the website and related services
send free guides, downloads, updates, or lead magnets
deliver paid digital products, planning packs, maps, itineraries, or other resources
send purchase confirmations and product access emails
manage access to premium content or unique access links
respond to enquiries, support requests, corrections, or complaints
send event updates, planning alerts, newsletters, or promotional emails where you have consented or where permitted by law
improve our articles, guides, maps, recommendations, products, and user experience
understand which content is useful to readers
analyse website traffic and performance
maintain records of consent, purchases, communications, and product delivery
manage interviews, quotes, contributor credits, media permissions, and content review processes
process affiliate referrals, where applicable
prevent fraud, misuse, scraping, unauthorised sharing, or security issues
comply with legal, accounting, tax, regulatory, or dispute-resolution obligations
enforce our Terms of Use and protect our rights, users, contributors, and partners

We do not use personal information for automated decisions that produce legal or similarly significant effects.

4. Legal bases for processing

Depending on where you are located, we may need a legal basis to process your personal information.

Where applicable, we rely on one or more of the following:

Consent — for example, when you join our email list, accept non-essential cookies, submit a testimonial, or agree to be interviewed or quoted.
Contract — for example, when we need your information to process a purchase, deliver a digital product, or provide customer support.
Legitimate interests — for example, to improve the site, understand usage, prevent fraud, secure our services, manage records, and operate the business.
Legal obligations — for example, tax, accounting, consumer law, regulatory, or dispute-related obligations.
Vital interests — only in rare circumstances where processing is necessary to protect someone’s safety.

You may withdraw consent where we rely on consent, but this will not affect processing that occurred before withdrawal.

5. When we share personal information

We may share personal information with trusted third parties where reasonably necessary to operate the website and services.

These may include:

website hosting and platform providers, such as Webflow or similar services
email marketing and automation providers, such as MailerLite
payment processors, such as Stripe
analytics providers, such as Google Analytics
map and embedded content providers, such as Google Maps or similar services
affiliate networks and referral tracking providers
customer support, form, survey, or automation tools
cloud storage, document, and productivity tools
accountants, bookkeepers, lawyers, insurers, or professional advisers
tour operators, accommodation providers, or other third-party travel providers, where you ask us to make an enquiry, referral, introduction, or booking-related connection
contributors, interviewees, photographers, videographers, or partners where required for agreed content collaboration or crediting
regulators, courts, government authorities, or law enforcement where required or permitted by law
another entity if Day of the Dead Journey is sold, transferred, merged, restructured, or assigned

We only share personal information where we have a reason to do so and, where required, an appropriate legal basis.

We do not sell personal information.

6. Affiliate links and third-party providers

Our website may include affiliate links, sponsored links, referral links, accommodation links, tour recommendations, map embeds, booking platform links, or links to other third-party providers.

If you click one of these links, the third party may collect information about you according to its own privacy policy. This may include tracking information, cookies, booking details, purchase information, or referral identifiers.

We are not responsible for the privacy practices of third-party websites, booking platforms, payment processors, tour operators, accommodation providers, map providers, social media platforms, or other external services.

You should review the privacy policy of any third-party service before using it, booking with it, or providing personal information to it.

7. International transfers

Day of the Dead Journey is based in Australia, but the tools and service providers we use may store or process personal information in other countries, including the United States, the United Kingdom, the European Union, Mexico, New Zealand, or other locations.

Where we transfer personal information internationally, we take reasonable steps to ensure that appropriate protections are in place, depending on the type of information and the service provider involved.

By using our services or providing information to us, you understand that your information may be processed outside your country of residence.

8. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

In general:

email marketing information is kept until you unsubscribe or ask us to delete it, though we may keep a suppression record to ensure we do not email you again
purchase and transaction records may be kept for accounting, tax, fraud prevention, support, and legal purposes
support messages and enquiries may be kept for a reasonable period to manage the relationship and improve the service
analytics data may be retained in aggregated or anonymised form
interview, contributor, media release, quote, and consent records may be kept for as long as the related content remains published or as needed to manage permissions
legal, dispute, complaint, or security-related records may be kept for as long as necessary to protect our rights and comply with obligations

When information is no longer needed, we will take reasonable steps to delete, de-identify, or anonymise it.

9. How we protect personal information

We take reasonable organisational and technical steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.

These steps may include:

using reputable service providers
limiting access to personal information
using password-protected systems
using secure payment processors
keeping systems and tools reasonably updated
maintaining records of consent and permissions where relevant
monitoring for misuse, scraping, unauthorised access, or technical issues

However, no online transmission, website, email system, payment system, or storage technology can be guaranteed to be completely secure. You use the services at your own risk.

10. Children and minors

Our services are intended for adults and travellers who are able to make their own travel decisions.

We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact us and we will take reasonable steps to delete it.

11. Sensitive information

We do not intentionally collect sensitive personal information.

Please do not send us sensitive information unless it is genuinely necessary. If you choose to provide sensitive information, such as health, accessibility, dietary, religious, cultural, or safety-related details, we will use it only for the purpose for which you provided it, or as otherwise permitted by law.

If we later introduce forms that request sensitive information, we will update this Privacy Policy and provide appropriate notice or consent language.

12. Your privacy rights

Depending on where you live, you may have rights to:

access the personal information we hold about you
ask us to correct inaccurate, incomplete, or outdated information
ask us to delete personal information
withdraw consent where we rely on consent
unsubscribe from marketing emails
object to or restrict certain processing
request a copy of your information
complain to a privacy regulator

These rights are not always absolute. We may need to keep certain information for legal, accounting, tax, fraud prevention, dispute-resolution, product-delivery, security, or legitimate business reasons.

To make a privacy request, contact us at:

dayofthedeadjourney@gmail.com

We may need to verify your identity before responding to your request.

13. Australian privacy rights

If you are in Australia, you may have rights under the Privacy Act 1988 and the Australian Privacy Principles, where those laws apply.

You may contact us to request access to or correction of personal information we hold about you.

If you are not satisfied with how we handle your privacy request or complaint, you may contact the Office of the Australian Information Commissioner.

14. New Zealand privacy rights

If you are in New Zealand, you may have rights under New Zealand privacy law, including rights to access and correct personal information.

If you are not satisfied with how we handle your privacy request or complaint, you may contact the Office of the New Zealand Privacy Commissioner.

15. European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws.

These may include the right to:

access your personal data
correct inaccurate personal data
request deletion of personal data
restrict processing
object to processing
request data portability
withdraw consent
complain to your local data protection authority

Where we rely on consent, you can withdraw that consent at any time.

16. United States privacy rights

If you are located in the United States, you may have privacy rights depending on your state of residence.

These may include the right to:

know what personal information we collect
access personal information
correct inaccurate personal information
request deletion of personal information
obtain a copy of personal information
opt out of certain types of targeted advertising, sale, or sharing, where applicable
not be discriminated against for exercising privacy rights

We do not sell personal information.

If we later use advertising pixels, targeted advertising, or tracking technologies that create additional rights in certain US states, we will update this Privacy Policy and provide appropriate opt-out options where required.

17. Email marketing

We only send marketing emails where we have consent or where permitted by law.

Marketing emails may include:

Oaxaca planning updates
event alerts
free guides
cultural travel content
product updates
launch announcements
premium pack information
affiliate or partner recommendations

You can unsubscribe at any time by clicking the unsubscribe link in our emails or contacting us at dayofthedeadjourney@gmail.com.

We will honour unsubscribe requests in accordance with applicable law.

Unsubscribing from marketing emails does not stop necessary service emails, such as purchase confirmations, product access emails, support replies, or important legal notices.

18. User submissions, interviews, and media

If you submit feedback, corrections, stories, reviews, testimonials, photos, videos, quotes, interview material, or other content to us, we may collect and store information connected with that submission.

This may include:

your name
email address
role, business, or public profile
social media handle or website
submitted text, photos, videos, audio, or files
consent records
interview notes, recordings, transcripts, or approved quotes
compensation or payment records, where applicable

We will use contributor, interview, quote, photo, video, and media material in accordance with the consent, licence, release, or written agreement that applies to that material.

For formal interviews, paid collaborations, photography, videography, or named cultural contributions, we may ask you to agree to a separate interview release, media release, contributor agreement, or licence.

19. Links to other websites

Our website may link to third-party websites, platforms, maps, booking systems, social media pages, affiliate partners, payment providers, and other external services.

We are not responsible for the privacy practices, content, security, accuracy, or policies of those third parties.

Clicking an external link or using an embedded third-party feature may allow that third party to collect information about you.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be indicated by the “Last updated” date at the top of this page.

If we make material changes, we may provide additional notice, such as a website notice or email notification where appropriate.

21. Contact us

For questions, privacy requests, corrections, complaints, or concerns, contact us at:

Day of the Dead Journey
Melbourne, Victoria, Australia
Email: dayofthedeadjourney@gmail.com
Website: dayofthedeadjourney.com

‍